Jul <var data-var='date'>30</var>, <var data-var='time'>05:00</var> UTC Completed - The scheduled maintenance has been completed. Jul <var data-var='date'>30</var>, <var data-var='time'>03:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jul <var data-var='date'>27</var>, <var data-var='time'>15:32</var> UTC Scheduled - We are performing routine maintenance from 8-10pm MT.

Scheduled Maintenance

Jun <var data-var='date'>30</var>, <var data-var='time'>02:44</var> UTC Resolved - This incident has been resolved. Jun <var data-var='date'>30</var>, <var data-var='time'>02:44</var> UTC Update - We are continuing to monitor for any further issues. Jun <var data-var='date'>30</var>, <var data-var='time'>01:46</var> UTC Monitoring - A fix has been implemented and we are monitoring results. Jun <var data-var='date'>29</var>, <var data-var='time'>19:07</var> UTC Identified - The issue has been identified and we are currently working on a fix.

Investigating issues with delayed telemetry processing

Jun <var data-var='date'>18</var>, <var data-var='time'>04:00</var> UTC Completed - The scheduled maintenance has been completed. Jun <var data-var='date'>18</var>, <var data-var='time'>01:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jun <var data-var='date'>18</var>, <var data-var='time'>00:35</var> UTC Scheduled - Red Canary will be performing routine Kubernetes infrastructure upgrades during the upcoming maintenance window. Customer-facing services will remain operational.

Scheduled maintenance

May <var data-var='date'>16</var>, <var data-var='time'>20:49</var> UTC Resolved - This incident has been resolved. May <var data-var='date'>16</var>, <var data-var='time'>20:17</var> UTC Update - Threat detection for our Government CrowdStrike customers may be delayed due to an incident with CrowdStrike’s Falcon Data Replicator. This incident will be updated as additional information becomes available from CrowdStrike. May <var data-var='date'>16</var>, <var data-var='time'>20:13</var> UTC Identified - Threat detection for our Government CrowdStrike customers may be delayed due to an incident with CrowdStrike’s Falcon Data Replicator. This incident will be updated as additional information becomes available from CrowdStrike.

Detection delayed for CrowdStrike customers

May <var data-var='date'>16</var>, <var data-var='time'>00:46</var> UTC Resolved - This incident has been resolved. May <var data-var='date'>16</var>, <var data-var='time'>00:45</var> UTC Update - We are continuing to work on a fix for this issue. May <var data-var='date'> 6</var>, <var data-var='time'>23:38</var> UTC Identified - Customers using Red Canary as an IdP or a third‑party IdP with certificate validation enabled must rotate the SSO certificate before Friday to avoid login failures. Non‑SSO customers are unaffected. Visit the following support article for information regarding how to check your IdP Configuration: https://support.redcanary.com/hc/en-us/articles/40275397886103-Checking-Your-IdP-s-SAML-SP-Certificate-Configuration Contact zendesk@redcanary.com for further assistance.

Urgent: SSO Certificate Expires Friday

May <var data-var='date'> 9</var>, <var data-var='time'>05:46</var> UTC Resolved - This incident has been resolved. May <var data-var='date'> 8</var>, <var data-var='time'>23:07</var> UTC Identified - The issue has been identified and a fix is being implemented. May <var data-var='date'> 8</var>, <var data-var='time'>22:40</var> UTC Investigating - We are investigating an issue impacting AWS ingestors, which is causing a delay in our processing of Cloudtrail and GuardDuty alerts.

Cloudtrail and GuardDuty alert processing delay

Apr <var data-var='date'> 8</var>, <var data-var='time'>22:16</var> UTC Resolved - Monitoring has confirmed the system is operating normally and detections are no longer delayed. Apr <var data-var='date'> 8</var>, <var data-var='time'>19:50</var> UTC Monitoring - We are currently investigating reports of intermittent detection delays. The issue has been identified and a fix has been implemented. We are monitoring the system to confirm that it is returning to normal operations.

Investigating issues with delayed detections

Apr <var data-var='date'> 7</var>, <var data-var='time'>03:34</var> UTC Resolved - This incident has been resolved. Apr <var data-var='date'> 7</var>, <var data-var='time'>02:19</var> UTC Monitoring - We are monitoring the system to confirm that it is returning to normal operations. Apr <var data-var='date'> 6</var>, <var data-var='time'>23:26</var> UTC Investigating - We are investigating delayed telemetry surrounding Google Cloud Platform data due to underlying issues in the AWS Cloud Platform. We have notified the AWS production engineering team and are monitoring the issue to ensure they resolve the issue promptly. Telemetry, events, and detections may be delayed in our Web Portal, APIs, and systems that leverage those APIs such as Canary Exporter for GCP telemetry.

Investigating Issues with Google Cloud Platform

Jan <var data-var='date'>23</var>, <var data-var='time'>02:28</var> UTC Completed - We are completed with our maintenance and should be back online. Jan <var data-var='date'>23</var>, <var data-var='time'>02:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jan <var data-var='date'>20</var>, <var data-var='time'>23:16</var> UTC Scheduled - We will be undergoing scheduled maintenance during this time.

Jan <var data-var='date'> 8</var>, <var data-var='time'>04:00</var> UTC Completed - The scheduled maintenance has been completed. Jan <var data-var='date'> 8</var>, <var data-var='time'>02:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jan <var data-var='date'> 5</var>, <var data-var='time'>20:37</var> UTC Scheduled - We will be undergoing routine database upgrade maintenance. The expected downtime should be no longer than 2 hours.

Database Upgrade

Dec <var data-var='date'> 5</var>, <var data-var='time'>01:56</var> UTC Resolved - This incident has been resolved. Dec <var data-var='date'> 4</var>, <var data-var='time'>22:33</var> UTC Monitoring - We are investigating ingestion issues with VMware Carbon Black Response services hosted by Red Canary. Sensor telemetry, events, and detections may be delayed in our Web Portal, APIs, and systems that leverage those APIs such as Canary Exporter. New sensor connections and installations may be impacted. The issue has been identified and a fix is being implemented. We are monitoring the system to confirm that it is returning to normal operations.

Investigating issues with VMware Carbon Black Response

Nov <var data-var='date'>26</var>, <var data-var='time'>04:00</var> UTC Completed - The scheduled maintenance has been completed. Nov <var data-var='date'>26</var>, <var data-var='time'>02:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Nov <var data-var='date'>24</var>, <var data-var='time'>17:36</var> UTC Scheduled - Red Canary will be performing routine database maintenance during the upcoming maintenance window. During this time, your Red Canary portal may be inaccessible and publication of some Detections may be delayed.

Nov <var data-var='date'>20</var>, <var data-var='time'>06:00</var> UTC Completed - The scheduled maintenance has been completed. Nov <var data-var='date'>20</var>, <var data-var='time'>02:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Nov <var data-var='date'>19</var>, <var data-var='time'>16:42</var> UTC Scheduled - Red Canary will be performing scheduled maintenance on Wednesday 2025-11-19 from 19:00MT to 23:00MT. We will continue to ingest and process data during this period, however Cloud and Identity data processing may be delayed during this time. No data loss is expected. [This is an update to the maintenance previously scheduled]

[Updated] Scheduled maintenance on Wednesday 2025-11-19

Nov <var data-var='date'>19</var>, <var data-var='time'>16:38</var> UTC Update - The scheduled maintenance has been completed. Nov <var data-var='date'>19</var>, <var data-var='time'>06:00</var> UTC Completed - The scheduled maintenance has been completed. Nov <var data-var='date'>19</var>, <var data-var='time'>02:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Nov <var data-var='date'>18</var>, <var data-var='time'>18:24</var> UTC Scheduled - Red Canary will be performing scheduled maintenance on Wednesday 2025-11-19 from 19:00MT to 23:00MT. We will continue to ingest and process data during this period, however Cloud and Identity data processing may be delayed during this time. No data loss is expected.

Scheduled maintenance on Wednesday 2025-11-19

Nov <var data-var='date'>11</var>, <var data-var='time'>12:57</var> UTC Resolved - This incident has been resolved. Nov <var data-var='date'>11</var>, <var data-var='time'>12:33</var> UTC Monitoring - We are currently experiencing data processing delays, resulting in late detection notification to some customers.

Data processing delays

Nov <var data-var='date'> 5</var>, <var data-var='time'>03:12</var> UTC Completed - The scheduled maintenance has been completed. Nov <var data-var='date'> 5</var>, <var data-var='time'>02:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct <var data-var='date'>31</var>, <var data-var='time'>18:53</var> UTC Scheduled - Red Canary will be performing routine database maintenance during the upcoming maintenance window. During this time, your Red Canary portal may be inaccessible and publication of some Detections may be delayed.

Nov <var data-var='date'> 1</var>, <var data-var='time'>12:28</var> UTC Resolved - This incident has been resolved. Oct <var data-var='date'>31</var>, <var data-var='time'>21:55</var> UTC Update - We are continuing to work on a fix for this issue. Oct <var data-var='date'>31</var>, <var data-var='time'>18:17</var> UTC Identified - We have identified an issue that is causing intermittent delays in processing cloud and identity data. We are actively working on a fix. Detections may be delayed.

Intermittent Delays for Cloud and Identity Data

Oct <var data-var='date'>29</var>, <var data-var='time'>22:18</var> UTC Resolved - This incident has been resolved. Oct <var data-var='date'>29</var>, <var data-var='time'>21:43</var> UTC Monitoring - Microsoft Office 365 external service integrations are now functioning as expected. Detections may be delayed as we process the backlog. Oct <var data-var='date'>29</var>, <var data-var='time'>17:16</var> UTC Investigating - We are aware of a reported degradation with the manage.office.com domain that is impacting some Microsoft Office 365 services. At this time telemetry and detections for Microsoft Office 365 External Service Integrations may be delayed.

Investigating issues resulting from reported Azure outage

Oct <var data-var='date'>27</var>, <var data-var='time'>22:18</var> UTC Resolved - This incident has been resolved. Oct <var data-var='date'>27</var>, <var data-var='time'>21:06</var> UTC Identified - We identified an issue impacting data processing for Google Workspace customers and have implemented a fix. Detections may be delayed.

Data Processing Delays for Google Workspace

Oct <var data-var='date'>24</var>, <var data-var='time'>21:53</var> UTC Resolved - This incident has been resolved. Oct <var data-var='date'>24</var>, <var data-var='time'>16:17</var> UTC Monitoring - We are processing a large backlog of data and detections may be delayed.

Oct <var data-var='date'>20</var>, <var data-var='time'>22:55</var> UTC Resolved - This incident has been resolved. Services are operating as expected. Oct <var data-var='date'>20</var>, <var data-var='time'>16:38</var> UTC Monitoring - We are aware of a reported AWS degradation that may be impacting some services. At this time, telemetry for Jamf Threat Defense and VMware Carbon Black Response, hosted by Red Canary, may experience delays. We have observed signs of recovery in the affected services and continue to monitor the situation closely.

Investigating issues resulting from reported AWS outage

Oct <var data-var='date'>20</var>, <var data-var='time'>10:31</var> UTC Resolved - This incident has been resolved. Services are operating as expected. Oct <var data-var='date'>20</var>, <var data-var='time'>10:09</var> UTC Monitoring - We are aware of a reported AWS degradation that may be impacting some services. At this time, telemetry for Jamf Threat Defense and VMware Carbon Black Response, hosted by Red Canary, may experience delays. We have observed signs of recovery in the affected services and continue to monitor the situation closely.

Oct <var data-var='date'>16</var>, <var data-var='time'>00:56</var> UTC Resolved - This incident has been resolved. Oct <var data-var='date'>15</var>, <var data-var='time'>23:31</var> UTC Monitoring - A fix has been implemented and we are monitoring the results. Oct <var data-var='date'>15</var>, <var data-var='time'>21:55</var> UTC Identified - The issue has been identified and a fix is being implemented. Oct <var data-var='date'>15</var>, <var data-var='time'>21:20</var> UTC Investigating - We are currently investigating an issue with some pages being unavailable in the Red Canary portal. We will update this incident as more information becomes available.

Red Canary portal issue under investigation

Sep <var data-var='date'>23</var>, <var data-var='time'>03:00</var> UTC Completed - The scheduled maintenance has been completed. Sep <var data-var='date'>23</var>, <var data-var='time'>01:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep <var data-var='date'>18</var>, <var data-var='time'>19:54</var> UTC Scheduled - Red Canary will be performing routine database maintenance during the upcoming maintenance window. During this time, your Red Canary portal may be inaccessible and publication of some Detections may be delayed.

Sep <var data-var='date'>18</var>, <var data-var='time'>18:40</var> UTC Resolved - This incident has been resolved. Sep <var data-var='date'>18</var>, <var data-var='time'>18:18</var> UTC Identified - We have identified an issue that is causing the Red Canary web portal and API requests to return errors intermittently for some customers. We are implementing a fix and will update this incident upon resolution of the impact.

Is Red Canary down?

Red Canary status is UP

Lastest published events

Scheduled Maintenance

Investigating issues with delayed telemetry processing

Scheduled maintenance

Red Canary Services, Components and Regions

Recent Red Canary events

Scheduled Maintenance

Investigating issues with delayed telemetry processing

Scheduled maintenance

Detection delayed for CrowdStrike customers

Urgent: SSO Certificate Expires Friday

Cloudtrail and GuardDuty alert processing delay